You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Winlogon.exe and csrss.exe

So lately my laptop is running really slow at the startup and I recently noticed that in my processes there are these two with no description or user so I guess they're infected but anti-malware and avast antivirus which i have installed aren't helping so i figured out I'll just ask here.Any help would be apreciated .Thank you in advance.

winlogon.exe is a process belonging to the Windows login manager and part of the Windows Login subsystem. winlogon.exe is necessary for user authorization, checking the Windows XP activation code and handling interactive user logons and logoffs. Determining whether winlogon.exe is malware or a legitimate Windows process usually depends on the location (path) it is running from. One of the ways that malware tries to hide is to give itself the same name as a legitimate or critical system file. However, it then places itself in a different location (folder) than where the legitimate file resides and runs from there. The legitimate winlogon.exe file is located in the C:\Windows\System32 folder. If found running from a different location, it's usually indicative of malware, it's usually indicative of malware.

csrss.exe is the user-mode portion of the Win32 subsystem (Win32.sys is the kernel-mode portion) and the main executable for the Microsoft Client/Server Runtime Server Subsystem. It is responsible for managing most graphical commands in Windows, console windows, creating and/or deleting threads, and some parts of the 16-bit virtual MS-DOS environment. This process is important for stable and secure operation of your system and should not be terminated. The legitimate csrss.exe file is located in the C:\Windows\System32 folder but you may find legitimate copies in other folders such as:

Windows Task Managerdoes not provide enough information. These are tools to investigate running processes, programs that run at startup, services and gather additional information to identify them or resolve problems: